Security News > 2022 > May > Credit card skimming services make it easy for low-level cybercriminals to join the game

Credit card skimming is a technique that consists of using malicious code installed on compromised merchant websites to steal credit card information sent by the website's customers when they complete online payments.

Once the attacker has access to the website's content, they need to add malicious code to steal the credit card information provided by the unsuspecting customers.

Most skimmers use JavaScript, with their added code sitting quietly in the middle of legitimate code from the website waiting patiently for credit card information.

Skimmer as a service: Meet CaramelCorp. Cybercriminals nowadays sell almost any kind of service one might think of.

This is where Russian-based credit card skimming service CaramelCorp comes in, as reported by DomainTools.

Caramel skimmer uses the setInterval() method, which is common to most other credit card skimmers.

News URL

https://www.techrepublic.com/article/credit-card-skimming-services-easy-join/